Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
File:                     au6rXTwAHVetswh4EhecgpIouCE.mft (raw, json)
Hash identifier:          7eRdXyDk1VtuMSSp+2Q4LoTQ7KeTwfIUpg0JRq9yZD4=
Subject key identifier:   32:DD:F3:0E:C0:B2:FE:60:D3:18:44:1C:64:F7:F1:CF:E3:22:C9:35
Authority key identifier: 6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
Certificate issuer:       /CN=6aeeab5d3c001d57adb3087812179c829228b821
Certificate serial:       019CAB6B73C1ADD6DB5CEC1A8F634C168E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 22:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:11 +0000
Files and hashes:         1: au6rXTwAHVetswh4EhecgpIouCE.crl (hash: L5lIx4hIj/jXu6O6MRwc4tw+OZEjFdlAtCNjNmi8yD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:73:c1:ad:d6:db:5c:ec:1a:8f:63:4c:16:8e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeeab5d3c001d57adb3087812179c829228b821
        Validity
            Not Before: Mar  1 22:01:11 2026 GMT
            Not After : Mar  2 22:01:11 2026 GMT
        Subject: CN=32ddf30ec0b2fe60d318441c64f7f1cfe322c935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:86:20:8d:d2:e8:38:21:d9:2d:a0:f8:5c:c0:
                    df:9b:88:1c:f1:29:07:30:5a:58:03:7a:aa:60:85:
                    2d:8f:08:25:2d:e1:75:2c:04:ab:c0:ff:b6:47:29:
                    62:bf:7d:f5:47:12:b5:e8:32:93:3a:ac:61:c6:7a:
                    26:0b:cc:05:50:be:54:0f:6b:ef:98:20:fd:32:9f:
                    79:f4:6b:da:ab:6e:c6:7c:13:b0:34:6d:9d:d4:78:
                    a9:6f:5f:86:a6:97:f5:7d:2b:d2:35:65:c1:cf:79:
                    2f:d0:f7:17:21:de:35:8a:bf:2a:f5:ad:a2:ac:91:
                    b3:59:31:94:ea:04:31:35:b4:7e:21:d0:8b:8f:79:
                    ca:2c:9b:b1:1e:2c:73:5c:a4:29:67:7f:59:d9:c7:
                    7c:9a:fa:84:d4:d3:46:1a:18:09:30:fb:09:65:21:
                    b7:e4:26:3b:c6:a0:c5:bd:9a:d0:8b:f0:8e:22:39:
                    6f:e7:19:b5:a0:f9:f6:26:86:ec:a1:77:2f:04:18:
                    e3:07:da:2a:70:3c:d1:22:5c:9e:d3:cc:e5:97:61:
                    03:ca:de:f6:1e:31:3e:90:ad:6c:e8:b6:87:98:a6:
                    ab:10:fa:e3:60:7f:04:b1:5f:c2:a9:c3:58:c6:ab:
                    f0:93:aa:34:24:9a:e6:2a:97:d7:e7:2b:3e:f4:6e:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DD:F3:0E:C0:B2:FE:60:D3:18:44:1C:64:F7:F1:CF:E3:22:C9:35
            X509v3 Authority Key Identifier:
                keyid:6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:ce:dc:cf:51:37:78:cf:66:ba:af:45:b7:a9:a1:c6:f6:
         74:bc:38:e4:13:28:30:d8:d9:1f:bd:db:84:c9:e8:e4:8a:08:
         73:d7:6b:1d:06:8e:4e:b0:1c:fb:c0:e7:dc:ee:24:19:3c:54:
         80:f0:ac:48:64:90:ec:35:21:28:55:2d:52:73:9c:ec:68:25:
         f0:d0:6b:9f:3f:0a:4c:7c:cf:dd:ae:2e:8e:97:7f:43:36:fb:
         0b:76:d3:7f:03:ef:b7:30:b3:a6:21:9c:b4:c4:e2:e7:82:ab:
         a7:22:36:9c:24:77:1d:88:06:15:73:85:ba:2d:f3:48:bc:26:
         b9:15:b1:98:5c:2b:10:19:2b:8f:33:3b:45:7e:b6:6d:7c:30:
         75:d9:c6:40:e3:32:92:db:73:2a:2c:4a:62:bf:af:b1:27:d7:
         f7:85:62:db:4d:3c:3b:23:88:13:09:21:dd:f9:9e:54:b0:27:
         23:fc:ac:4e:7a:9b:a0:03:16:66:f1:92:56:bc:8a:a1:b8:a7:
         0a:d6:4c:74:b2:e8:2b:09:94:b5:53:ec:b1:76:67:6a:f3:cb:
         81:7a:9e:81:d2:39:9e:33:4c:93:bd:7b:cc:dc:4f:25:97:b7:
         dd:7a:81:6c:f2:c8:23:73:ed:03:0a:9d:8a:0f:89:32:e0:4e:
         89:8d:64:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:10 2026 by rpki-client